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CLAIMS 



What is claimed is: 

1. A method of processing serv/ce requests from a client 
to a server system througly a network, said method 
comprising the steps of: 

forwarding a service request from the client to 
the server system; anc 

appending a ses/ion idefat/if ier to the request and 
subsequent service >request^^fom the client to the 
server system within a session of requests. 

The method of Claim 1 wherein communications between 
the client and server system are according to 
hypertext transfer protocol . 



A method of processing/ service requests from a client 
to a server system tlafrough a network, said method 
comprising the steps of: 

forwarding a/service request from the client to 
the server syst< 

returning/a session identifier from the server 
system to ther client; and 

appending the session identifier to the request 
and to subsequent service requests from the client to 
the server system within a session of requests. 



The method of Claim 3 wkier 
the client and server /sys 
hypertext transfer p/oto 




>mmunications between 
re according to 



5. 



A method as claimed in Claim 3 wherein the session 
identifier includes a user identifier. 
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6. A method as claimed in Claim 3 wherein the session 
identifier includes an expiration time for the ■ 
session. 

7 . A method as claimed in Claim 3 wherein the server 

5 system records information from the session identifier 

in a transaction log in the server system. 

8. A method as claimed in Claim 7 wherein the server 
system tracks the access history of sequences of 
service requests within a session of requests. 



or. 
O 



10 9. A method as claimed in Claim 8 wherein the server 

system tracks the access history to determine service 
requests leading to a purchase made within the session 
of requests. 

10. A method as claimed in Claim 7 wherein the server 
15 system counts requests to particular services 

exclusive of repeated requests from a common client. 

11. A method as claimed in Claim 7 wherein the server 
system maintains a data base relating customer 
information to access patterns. 

20 12. A method as claimed in Claim 11 wherein the 
information includes customer demographics. 

13 . A method as claimed in Claim 3 wherein the server 

system assigns the session identifier to an initial 
service request to the server system. 
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A method as claimed in Claim 3 wherein the server 
system subjects the client to an authorization routine 
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prior to issuing the session identifier and the 
session identifier is protected from forgery. 

A method as claimed in Claim 3 wherein the server 
system comprises plural servers including an 
authentication server which provides session 
identifiers for service requests to multiple servers. 

A method as claimed in Claim 15 wherein^ 

a client directs a service request to a first 

server which is to provide the requested service; 

the first server checks the /Service request for a 

session identifier and only services a service request 

having a valid session identifier, and where the 

service request has no vallja identifier : 

the first serve/ redirects the service 

request from the client/to the authorization server; 

the authorization server subjects the client 

to the authorization/routine and issues the session 

identifier to be appended to the service request to 

the first server/ 

the client forwards the service request 

appended with/the session identifier to the first 

server; and / 

iz^ne first server recognizes the session 

identifier and services the service request to the 

client ; / and 

tthe client appends the session identifier to 

subsequent service requests to the server system and 

is ^serviced without further authorization. 

A method as claimed in Claim 16 wherein the session 
identifier includes a user identifier. 
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18. A method as claimed in Claim 16 wherein the session 
identifier includes an expiration time for the 
session . 

19. A method as claimed in Claim 16 wherein the session 
identifier provides access to a protected domain to 
which the session has access authorization. 

20. A method as claimed in Claim 19 wherein the session 
identifier is modified for access to a different 
protected domain. 

21. A method as claimed in Claim 16 wherein the session 
identifier provides a key identifier for key 
management . 

22. A method as claimed in Claim 16 wherein the server 
system records information from the session identifier 
in a transaction log in the server system. 

23 . The method of Claim 3 wherein the access rights of the 
client are fully contained within the session 
identifier. 

24. A method as claimed in/claim 1 wherein a service 
request is for a document and the session identifier 
includes a user ideiytif ication, further comprising: 

returning the /requested document wherein the 
document is custor/ized for a particular user based on 
the user identification of the session identifier. 



A method as claimed in Claim 1 wherein a service 
request is top a document which has been purchased by 



a user, the session identifier comprises' an 
authorization identifier, and further ^comprising : 

returning the requested document/ if the 
authorization identifier indicates ythat the user is 
authorized to access the document 

A method as claimed in Claim 1 /wherein a service 
request is for a document wherein the session 
identifier comprises a user yidentif ier, and further 
comprising: 

returning the requested document to the client; 
and I 

charging the user ^identified in the identifier 
for access to the document. 

A method of processing service requests from a client 
to a server systemy^hrough a network, said method ^ 
comprising the steps of: 

appending a/session identifier to the request; 

and 

responding to requests for documents received 
from the client through the network by returning the 
requested documents wherein the documents are 
customized fpr a particular user based on a user 
profile . 

A method of processing service requests from a client 
to a server system through a network, said method 
comprising the steps of: 

responding to a request for a document received 
from the client through the network; 

appending a session identifier, which includes a 
user identification, to the request; and 
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returning the requested document wherein the 
document is customized toy a particular user based on 
the user identification pt the session identifier. 

A method of processing service requests from a client 
to a server system tmrough a network, said method 
comprising the steps of: 

appending a /session identifier to the request; 

responding/to requests for information received ^/ 
from the clierit through the network by returning the 
requested information to the client; and 

counting requests to particular information 
exclusiWof repeated requests from a common client. 



A method as c 
from the count 
the client wi 




Claim 29 comprising excluding 
sts made for information from 
ned period of time. 



A method of processing service requests for a document 
received from a client j/hrough.a network in which the 
document has been purchased by a user, said method 
comprising the steps /of : 

responding to / request for a document received 
from a client through the network in which the 
document has beer/ purchased by the user; 

appending jkn authorization identifier to the 
request; and 

returnirftj the requested document if the 
authorization identifier indicates that the user is 
authorizes* to access the document 



A method as claimed in Claim 31, wherein the 
authorization identifier is encoded within a session 
identifier which is appended to the request. 




# 
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A method of processiiKj service requests from a client 
to a server system through a network, said method 
comprising the steps of: 

responding yo a request for a document received 
from a client through the network; 



appending/ a session identifier to the request; ^ 
returning the requested document to the client, 

and ; / 

charging the user identified in the session 
identifier for access to the document. 

A method as claimed in Claim 33, wherein a user 
identifier is encoded within a session identifier 
which is appended to the request. 

An information system on <J network, comprising: 

means for receiving/service requests from clients 

and for determining whether a service request includes 

a session identifier/ 

means for providing the session identifier in 

response to an initial service request in a session of 

requests; and / 

means fcfr servicing service requests from a 

client whioh include the session identifier, the 

subsequent service request being processed in the 

sessions 

The information system of Claim 35 wherein access 
rights of the client are fully contained within the 
session identifier. 




An information system as claimed in Claim 35 wherein 
the means for providing the session identifier is in a 
server system which services the requests. 
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An information system as claimed in Claim 35 further 
comprising an authorization routine for authorizing 
the client prior to issuing the session identifier and 
means for protecting the session identifier from 
forgery. 

An information server system as claimed in Claim 35 
further comprising a transaction log for recording 
information from the session identifier. 

An information system as claimed in Claim 35 further 
comprising means for tracking access history of 
sequences of service requests within the session of 
requests . 

An information system as claimed in Claim 3 5 further 
comprising means for counting requests to particular 
services exclusive of repeated requests from a common 
client . 

An information system as claimed in Claim 3 5 further 
comprising a data base relating customer information 
to access patterns. 

An information system as claimed in Claim 42 wherein 
the information includes customer demographics. 



The system of ClaJinpSb wherein communications to and 
from the c/ient>^&re according to hypertext transfer 
protocol / ff 1 



/ 

/ 

An information server on a network, comprising: 

means for responding to requests for service 

received from a client through a ^network by returning 

the requested service to the client; and 

means for counting requests to particular service 

exclusive of repeated requests from a common client. 

A server as claimed in C^aim 45 wherein the requests 
include a common session iderftTifier and the server 
tracks requests within a sesfstop of requests 




A server as claitrfed in Claim 45 further comprising 
means for excluding requests made to a service from 
the client within a defined period of time. 

A server As claimed in Claim 45 wherein communications 
to and prom the client are according to hypertext 
transfer protocol. 




